Your RSA-2048 keys break in 2030. Find every one of them before attackers do.
CISA KEV·Added 2021-11-03 — agencies required to remediate by 2022-05-03 · Ransomware

CVE-2018-6789

CRITICAL
Published
Feb 8, 2018
Updated
Apr 11, 2026
Affected
0 pkgs
Patched
None yet
Exploits
14 known

EPSS Exploitation Probability

via FIRST.org ↗
86.6%probability of exploitation in next 30 days
Very High Risk99th percentile-0.15%
85.6%86.2%86.7%87.2%86.1%86.6%Dec 25Apr 26Jun 26

EPSS (Exploit Prediction Scoring System) is a daily probability model maintained by FIRST.org. It estimates the likelihood a CVE will be exploited in production environments within the next 30 days, derived from real-world threat intelligence signals.

Description

An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely.

Exploits & PoCs
14

Research use only. For defensive security, authorized penetration testing, and academic research only. Never execute exploit code against systems without explicit written authorization.

EDB-45671remotelinux

exim 4.90 - Remote Code Execution

by hackk.gr · Oct 24, 2018

Exploit-DB Source
EDB-44571remotelinux

Exim < 4.90.1 - 'base64d' Remote Code Execution

by straight_blast · May 2, 2018

Exploit-DB Source

Frequently Asked Questions

An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely.
O3 Security · Impact-Aware SCA

Is CVE-2018-6789 in your stack?

O3 detects CVE-2018-6789 across dependencies and uses function-level reachability to confirm whether the vulnerable code path is actually reachable — not just present. No false positives.

Scan my stack How O3 SCA works